Hi kernel stable team, I want to report a regression in v4.19.245 / v4.19.246 in case someone else also hits this: strongswan 4.6 errors out with an assertion: Jun 13 08:55:02 mis1 pluto[4096]: "C1"[1] 10.2.0.1:10954 #2: ASSERTION FAILED at ipsec_doi.c:2852: case 3 unexpected (the source line number is not relevant due to extra patches) -> Our automated distro testsuite had IPSec related VPN test failures. A fix for the issue is queued for v4.19.247 already: https://git.kernel.org/pub/scm/linux/kernel/git/stable/stable-queue.git/tree/queue-4.19/revert-net-af_key-add-check-for-pfkey_broadcast-in-f.patch?id=ef7f0fb363ccf5f9890080db89412b9f0bd7650a 'Revert "net: af_key: add check for pfkey_broadcast in function pfkey_process"' >From the commit message of the revert: ********************************** "One visible effect is that racoon daemon fails to find encryption algorithms like aes and refuses to start." ********************************** For the older strongwan 4.6 "pluto" daemon the problem showed itself at a later stage during phase 2 of an IPSec tunnel setup. Thanks for the great work on the stable kernel! Regressions are a rare thing these days. Best regards, Thomas Jarosch
